Results 1 to 5 of 5

Thread: Honey Pot / Sam

  1. February 24th, 2005, 03:22 AM #1
    pcllwtfdtm
    pcllwtfdtm is offline
    Junior Member
    Join Date
    Sep 2004
    Posts
    9

    Honey Pot / Sam

    As we all know the passwords for a windows account is stored in the SAM file. So for some one who is trying to crack the login passwords, this becomes a very tepting file to "snatch". However, is it posible to move the SAM file. I mean there has got to be some where in the Windows Login authentication program that tells where to compaire the generated hash. If we moved the SAM file, we could then place a fake SAM in its place. Like a Honey pot. Anyone knwo if this is posible?

    ~PCLLWTFDTM
    Reply With Quote Reply With Quote
  2. February 24th, 2005, 03:32 AM #2
    |3lack|ce
    |3lack|ce is offline
    ********** |ceWriterguy
    Join Date
    Aug 2004
    Posts
    1,608
    http://www.antionline.com/showthread...&highlight=SAM

    Amazing what you can find when you use 'search', wot?
    Even a broken watch is correct twice a day.

    Which coder said that nobody could outcode Microsoft in their own OS? Write a bit and make a fortune!
    Reply With Quote Reply With Quote
  3. February 24th, 2005, 04:01 AM #3
    phishphreek
    phishphreek is offline
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    AFIAK, it is not possible to move the sam file.

    Maybe if you hackup the dll files that point to it?
    But then you have to worry about the CRC check?
    msgina.dll?

    Kinda out of my league... just throwing out some thoughts.
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.
    Reply With Quote Reply With Quote
  4. February 24th, 2005, 04:05 AM #4
    pcllwtfdtm
    pcllwtfdtm is offline
    Junior Member
    Join Date
    Sep 2004
    Posts
    9
    Thank you, however, perhaps im not making my self clear, The replacement of the SAM would be done by the owner of the machine SO that, any potential SAM crackers out there would grab a dummy file. The link you provided wasnt quite what i was looking for.
    Reply With Quote Reply With Quote
  6. February 24th, 2005, 04:33 AM #5
    pcllwtfdtm
    pcllwtfdtm is offline
    Junior Member
    Join Date
    Sep 2004
    Posts
    9
    phishphreek80, hey thanks for the suggestion, even if you're just throwing out ideas, its apreciated.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules